D4cEFfIh8TP[.]dll | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
D4cEFfIh8TP.dll
Size 612KB
Sample220121-wyrp5aahdn
SHA256 e39bda1e5d4f990da43aad6b5ddd94ec34b189f4ed0eca1771a1ffae6a82995b
MD5 c6d8d14d9a9f4649695fb9ddfeb60c0a
SHA1 4a1580e8939656fa10a5ac57a38dab14e2c86abb
SHA512 bc736e3326bbb36a51903d292d395cb131c56f086b3325eb3ccb52ff2006453d58b931fa20b709abe58a9b0a718fac0ef2d086a1c3432429760bade15c76741a
SSDEEP 12288:kqdJaxkOWFornPmGZqnTFWbDtUYVubhesslBvQqEPO7:kOOsornPTwFWbqYVohevBoi7
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

D4cEFfIh8TP.dll

.dll 612KB

D4cEFfIh8TP.dll

IMPHASH 24b46ffcf60dc8d39e8124f411ebd08e
SHA256 e39bda1e5d4f990da43aad6b5ddd94ec34b189f4ed0eca1771a1ffae6a82995b
MD5 c6d8d14d9a9f4649695fb9ddfeb60c0a
SHA1 4a1580e8939656fa10a5ac57a38dab14e2c86abb
SHA512 bc736e3326bbb36a51903d292d395cb131c56f086b3325eb3ccb52ff2006453d58b931fa20b709abe58a9b0a718fac0ef2d086a1c3432429760bade15c76741a
SSDEEP 12288:kqdJaxkOWFornPmGZqnTFWbDtUYVubhesslBvQqEPO7:kOOsornPTwFWbqYVohevBoi7
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

214396

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateFileA FileTimeToSystemTime FileTimeToLocalFileTime LocalFileTimeToFileTime SystemTimeToFileTime TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetSystemInfo HeapReAlloc GetCommandLineA RtlUnwind RaiseException ExitProcess HeapSize HeapDestroy HeapCreate GetStdHandle Sleep SetHandleCount GetFileType GetStartupInfoA GetShortPathNameA GetConsoleMode GetACP FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime GetStringTypeA GetStringTypeW GetTimeZoneInformation WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle LCMapStringA LCMapStringW SetEnvironmentVariableA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile DeleteFileA MoveFileA GetThreadLocale GetCurrentDirectoryA GetOEMCP GetCPInfo InterlockedIncrement TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc GlobalFlags InterlockedDecrement FormatMessageA LocalFree MulDiv GetDiskFreeSpaceA GetFullPathNameA GetTempFileNameA GetFileTime SetFileTime GetFileAttributesA CloseHandle GetPrivateProfileStringA WritePrivateProfileStringA GetPrivateProfileIntA GetTickCount GetCurrentThread ConvertDefaultLocale EnumResourceLanguagesA GetLocaleInfoA lstrcmpA GlobalAlloc GetCurrentProcessId GetModuleFileNameA GetCurrentThreadId GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom lstrcmpW GetModuleHandleA GetVersionExA SizeofResource GlobalLock GlobalUnlock GlobalFree FindResourceA LoadResource LockResource FreeResource GetVersion CompareStringA lstrcmpiA GetLastError InterlockedExchange GetStringTypeExA MultiByteToWideChar CompareStringW WideCharToMultiByte lstrlenA HeapFree GetProcessHeap HeapAlloc GetModuleHandleW FreeLibrary GetProcAddress LoadLibraryA IsBadReadPtr VirtualProtect SetLastError VirtualAlloc VirtualFree GetConsoleCP VirtualQuery

user32

SetRect WindowFromPoint GetDCEx LockWindowUpdate PostThreadMessageA CharNextA CopyAcceleratorTableA InvalidateRgn GetNextDlgGroupItem MessageBeep DestroyIcon UnregisterClassA MoveWindow SetWindowTextA IsDialogMessageA IsDlgButtonChecked SetMenuItemBitmaps GetMenuCheckMarkDimensions ModifyMenuA GetMenuState EnableMenuItem CheckMenuItem GetWindowThreadProcessId RegisterWindowMessageA LoadIconA SendDlgItemMessageA WinHelpA IsChild GetCapture SetWindowsHookExA CallNextHookEx GetClassLongA GetClassNameA SetPropA GetPropA RemovePropA GetFocus GetForegroundWindow GetLastActivePopup DispatchMessageA BeginDeferWindowPos EndDeferWindowPos GetTopWindow UnhookWindowsHookEx GetMessageTime GetMessagePos PeekMessageA MapWindowPoints ScrollWindow TrackPopupMenu GetKeyState SetScrollRange GetScrollRange InflateRect ShowScrollBar IsWindowVisible GetClientRect PostMessageA GetSubMenu GetMenuItemID GetMenuItemCount MessageBoxA CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA GetSysColor AdjustWindowRectEx ScreenToClient EqualRect DeferWindowPos CopyRect GetScrollInfo SetScrollInfo PtInRect GetDlgCtrlID DefWindowProcA CallWindowProcA SetWindowLongA SetWindowPos OffsetRect IntersectRect SystemParametersInfoA IsIconic GetWindowPlacement GetWindowRect GetWindowTextLengthA GetWindowTextA GetScrollPos SetScrollPos GetWindow SetFocus GetDesktopWindow GetActiveWindow SetActiveWindow GetSystemMetrics CreateDialogIndirectParamA LoadCursorA SetCapture EnableWindow KillTimer SetTimer ClientToScreen SetWindowRgn DrawIcon DestroyWindow IsWindow GetWindowLongA GetDlgItem IsWindowEnabled GetParent GetNextDlgTabItem EndDialog CharUpperA LoadBitmapA InvalidateRect GetDC GetMenuItemInfoA GetSysColorBrush EndPaint BeginPaint SendMessageA UpdateWindow GetWindowDC GrayStringA DrawTextExA DrawTextA GetMenu TabbedTextOutA FillRect FindWindowA GetMenuStringA InsertMenuA ShowOwnedPopups GetMessageA TranslateMessage GetCursorPos ValidateRect SetWindowContextHelpId MapDialogRect RegisterClipboardFormatA PostQuitMessage SetParent GetSystemMenu AppendMenuA DeleteMenu IsRectEmpty ReleaseDC IsZoomed UnpackDDElParam ReuseDDElParam LoadMenuA DestroyMenu SetCursor ReleaseCapture LoadAcceleratorsA InsertMenuItemA CreatePopupMenu SetRectEmpty BringWindowToTop SetMenu TranslateAcceleratorA SetForegroundWindow ShowWindow

gdi32

CreateEllipticRgn LPtoDP Ellipse ExtTextOutA CreateFontIndirectA CreateRectRgn CreateRectRgnIndirect SetRectRgn CombineRgn GetMapMode PatBlt CreatePatternBrush SaveDC RestoreDC SetBkMode SetMapMode ExcludeClipRect IntersectClipRect LineTo MoveToEx SelectClipRgn GetViewportExtEx GetWindowExtEx BitBlt GetPixel PtVisible RectVisible TextOutA Escape SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowExtEx ScaleWindowExtEx ExtSelectClipRgn GetStockObject CreateSolidBrush GetBkColor GetTextColor GetRgnBox GetDeviceCaps StretchDIBits DeleteDC CreateFontA GetCharWidthA DeleteObject GetTextExtentPoint32A GetTextMetricsA CreateCompatibleBitmap CreateBitmap GetObjectA SetBkColor SetTextColor GetClipBox CreateCompatibleDC SelectObject

msimg32

TransparentBlt

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA OpenPrinterA ClosePrinter

advapi32

RegEnumKeyA RegCreateKeyA RegSetValueA GetFileSecurityA SetFileSecurityA RegQueryValueA RegOpenKeyA RegCloseKey RegDeleteKeyA RegDeleteValueA RegSetValueExA RegCreateKeyExA RegOpenKeyExA RegQueryValueExA

shell32

DragFinish DragQueryFileA ExtractIconA SHGetFileInfoA DragAcceptFiles

comctl32

ord17

shlwapi

PathRemoveExtensionA PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

oledlg

ord8

ole32

StgOpenStorageOnILockBytes CoRegisterMessageFilter OleFlushClipboard OleIsCurrentClipboard CoRevokeClassObject CoGetClassObject CoTaskMemAlloc StgCreateDocfileOnILockBytes CoTaskMemFree CLSIDFromString CLSIDFromProgID OleInitialize CoFreeUnusedLibraries OleUninitialize CreateILockBytesOnHGlobal

oleaut32

SysAllocStringLen SysFreeString SysStringLen SysAllocStringByteLen OleCreateFontIndirect VariantTimeToSystemTime SystemTimeToVariantTime SafeArrayDestroy SysAllocString VariantInit VariantCopy VariantClear VariantChangeType